Hacker News new | ask | show | jobs
by dwaite 2281 days ago
Secure + HttpOnly do not expire at 7 days. These are invisible client-side.